Data Encryption Algorithms

TIBCO MFT Platform Server for z/OS supports three data encryption algorithms: Data Encryption Standard (DES), Blowfish, and AES.

DES Encryption

DES is a block encryption algorithm working in chunks of 8 bytes. The DES key length is fixed at 56 bits. An offshoot of the DES encryption algorithm is Triple DES (3DES), which effectively provides 112-bit encryption by a combination of encryption and decryption functions.

The advantage and disadvantages of DES are as follows:
  • Advantage of DES
    • This algorithm is an established standard that has withstood the test of time.
  • Disadvantages of DES
    • This algorithm is CPU intensive; therefore, it might slow down file transfers if CPUs are busy or slow. 3DES uses almost three times the CPU cycles that DES uses.
    • The 56-bit key length of the DES encryption algorithm is considered insufficient based on the current computer ability.

Blowfish Encryption

Blowfish is a block encryption algorithm that can use keys from 32 to 448 bits long. The platform server uses a 56-bit key if ENCRYPT=BLOWFISH or ENCRYPT=BF is specified, and uses a 448-bit key if ENCRYPT=BLOWFISH_LONG or ENCRYPT=BFL is specified.

The advantages and disadvantage of Blowfish are as follows:
  • Advantages of Blowfish
    • This algorithm is about six times faster than DES, and about fifteen times faster than 3DES.
    • The key length can range from 32 bits to 448 bits.
  • Disadvantage of Blowfish
    • This algorithm has not been tested by as many attacks as DES.

AES Encryption

AES is a symmetric block encryption algorithm that uses a key length of 256 bits.

The advantages and disadvantage of Rijndael are as follows:
  • Advantages of AES
    • This algorithm is selected as Advanced Encryption Standard (AES) by US government.
    • This algorithm supports 256-bit key length.
    • This algorithm is more efficient than DES or 3DES.
  • Disadvantage of AES
    • This algorithm is slightly less efficient than Blowfish or Blowfish Long.